Privacy Policy

1. Introduction

Buckeye Physical Therapy LLC, dba Yacht Club Algos ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Yacht Club Algos platform ("Service").

2. Information We Collect

Account Information

When you register for the Service, we collect:

• Name and email address
• Account credentials — your password is managed by our authentication provider (Supabase) and is never stored by us in any form, hashed or otherwise
• Subscription and billing information (processed by our payment provider, Stripe)

Brokerage Data

When you connect your brokerage account, we access:

• OAuth tokens — encrypted at rest using AES-256-GCM — for API access
• Account balances and positions for trade execution
• Trade history for performance tracking

We never store your brokerage password. Authentication is handled entirely through OAuth. We do not have the ability to withdraw funds from your brokerage account.

Usage Data

We automatically collect:

• IP address — used to rate-limit requests and protect the Service against abuse
• Login times and feature usage
• Trading module configuration and activity logs
• System and error logs for monitoring and debugging

Uploaded Content

If you use the Weekly Plan feature, we process chart images you upload through AI analysis. Uploaded charts are used solely to extract trading levels and are not shared with third parties.

3. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Service
• Execute trades on your behalf per your configured strategies
• Process payments and manage subscriptions
• Send trade notifications and account alerts
• Improve and optimize the Service
• Respond to support requests
• Comply with legal obligations

4. Information Sharing

We do not sell your personal information. We share only the minimum information necessary with the following third-party service providers, each of which has its own privacy policy:

• Charles Schwab & Co., Inc. — brokerage connectivity and order execution
• Supabase Inc. — database, authentication, and encrypted file storage
• Stripe Inc. — subscription payment processing
• Railway Corp. — backend application hosting
• Vercel Inc. — frontend application hosting
• Anthropic PBC — AI-powered chart analysis for the Weekly Plan feature
• Discord Inc. — community platform and optional trade notifications
• Law enforcement — only when required by law or valid legal process

5. Data Security

We implement industry-standard security measures to protect your information, including encryption of data in transit (TLS) and at rest, secure OAuth token storage, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account information for as long as your account is active. Trade history and performance data are retained for 12 months after account closure. You may request deletion of your data at any time by contacting us. Upon account deletion, we will remove your personal information within 30 days, except where retention is required by law.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Object to or restrict processing of your information
• Request a portable copy of your data

To exercise any of these rights, contact us at support@yachtclubalgos.com.

8. Cookies and Tracking

We use only essential cookies required to maintain your authenticated session and preferences. We do not use third-party advertising or analytics trackers, and we do not sell or share your activity with advertising networks. You can control cookie settings through your browser preferences, though disabling essential cookies may prevent you from staying logged in.

9. Third-Party Links

The Service may contain links to third-party websites or services (e.g., Discord, Charles Schwab). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

10. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we learn that we have collected information from a minor, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use after changes are posted constitutes acceptance.

12. Contact

If you have questions about this Privacy Policy, contact us at support@yachtclubalgos.com.